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Introduction 


This document provides guidelines to install and configure Identity Manager 4.8 Standard Edition, and upgrade 
to this version. 


Overview 
Identity Manager 4.8 Standard Edition provides the following features: 


+ Rule-based automated provisioning 

+ Password management (Self-Service Password Reset) 

+ Identity Reporting 

+ Content packaging framework 

¢ Single sign-on (One SSO) 

+ Analyzer 

+ Designer 
For installing, configuring, or upgrading Identity Manager Standard Edition, see the setup guide for your 
platform: 

+ NetIQ Identity Manager Setup Guide for Linux 

+ NetIQ Identity Manager Setup Guide for Windows 


IMPORTANT: Identity Manager 4.8 Advanced and Standard Editions are available in the same ISO file. The 
integration modules continue to remain the same for both editions. 


For information about new features, enhancements, and features that have changed or are no longer 
supported in this version, see NetIQ Identity Manager 4.8 Release Notes. 
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Installing Identity Manager 4.8 Standard Edition on Linux 


Download the software from the Product Web site. The Identity_Manager_4.8_Linux. iso file contains 
the DVD image for installing the Identity Manager components on Linux. 


The installation script is located in the directory where you have mounted the installation package. For 
information about the default installation locations, see NetIQ Identity Manager 4.8 Release Notes. 


Table 1 Checklist for Identity Manager Standard Edition Installation on Linux 


Task 


1. Prerequisites 


2. Plan your installation 


3. Order of installation and/or 
configuration 


4. (Conditional) Install Sentinel 
Log Management for IGA 
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Notes 


+ Review the system requirements for each component to ensure that your 


computer or virtual images meet the installation prerequisites. For more 
information, see the Identity Manager System Requirements page. 


For information about prerequisites for component-specific installation, see 
Considerations for Installing Identity Manager Components in the Net/Q 
Identity Manager Setup Guide for Linux. 


See Planning to Install Identity Manager in the Net/Q Identity Manager Setup 
Guide for Linux. 


Ensure that you install the components in the following order because the 
installation programs for some components require information about previously 
installed components. 


OO Be WN 


Sentinel Log Management for Identity Governance and Administration (IGA) 
Identity Manager Server components 

Identity Reporting components (also installs single sign-on component) 
Self-Service Password Reset 

Designer for Identity Manager 


Analyzer for Identity Manager 


If you need audit-based reports, configure the Data Synchronization Policy in the 
Identity Manager Data Collection Services page to forward events to the 
reporting database. 


For installation instructions, see Installing Sentinel Log Management for Identity 
Governance and Administration in the Net/Q Identity Manager Setup Guide for 
Linux. 


Task 


5. 


Install Identity Manager Server 
components Identity Reporting 
Components, and Password 
Management Component 


Notes 


From the mount directory of the . iso file, run the following command to install 
Identity Manager server and Identity Reporting components: 


./install.sh 


For more information on the installation steps, see one of the following resources 
in the NetIQ Identity Manager Setup Guide for Linux. 


+ Performing an Interactive Installation 


+ Performing a Silent Installation 


Identity Manager provides a separate installation program for installing SSPR. For 
installation instructions, see Installing SSPR or see Performing a Silent Installation 
of SSPR in the Net/Q Identity Manager Setup Guide for Linux. 


NOTE: If you are installing Identity Reporting on a computer that has iManager 
installed, do not use port 8080 for Tomcat. If other ports are already in use, 
change them during installation. 


The Identity Reporting installation process installs the authentication service for 
reporting. It also deploys the rptdoc.war and dcsdoc.war that contains the 
documentation of REST services needed for reporting. These .war files are 
automatically deployed on your application sever when Identity Reporting is 
installed. 


NOTE: You must import the report definitions into Identity Reporting. To 
download them, use the Download page within the Reporting application. 
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Task 


6. Configure the installed 
components (Identity Manager 
Server components, Identity 
Reporting Components, and 
Password Management 
Component) 


7. Install Designer 


8. Install Analyzer 


9. Activating Identity Manager 


Notes 


Configure Identity Manager server components and Identity Reporting 
components by running configure. sh, located in the mount directory of the 
„iso file. 


Before beginning the configuration process for all components, review the 
configuration options from Understanding the Configuration Parameters in the 
NetIQ Identity Manager Setup Guide for Linux. 


For configuring SSPR, see Configuring SSPR in the Net/Q Identity Manager Setup 
Guide for Linux. 


After you have configured the Identity Reporting component, assign the Report 
Administrator role to a user that you want to access reporting functionality. For 
more information, see “Creating and Assigning rptadmin Role to a User” on 
page 6. 


From the root directory of the 
Identity_Manager_Linux_LDAP_Designer.tar.gz file, run one of the 
following commands: 

+ Console: ./install 

¢ GUI: ./install -i console 


Follow the prompts and complete the installation. For more information, see 
Installing Designer in the Net/Q Identity Manager Setup Guide for Linux. 


From the root directory of the 
Identity_Manager_Linux_Analyzer. tar.gz file, run one of the 
following commands: 

+ Console: ./install 

¢ GUI: ./install -i console 


Follow the prompts and complete the installation. For more information, see 
Installing Analyzer in the Net/Q Identity Manager Setup Guide for Linux. 


Activate your Identity Manager components. For more information, see 
Activating Identity Manager in the NetIQ Identity Manager Setup Guide for Linux. 


Installing Identity Manager 4.8 Standard Edition on Windows 


Download the software from the Product Web site. The Identity_Manager_4.8_ Windows. iso file 
contains the DVD image for installing the Identity Manager components. 


The installation files are located in the respective directories in the Identity Manager installation package. For 
information about the default installation locations, see Executables and Default Installation Paths on 
Windows in the Net/Q Identity Manager 4.8 Release Notes. 
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Table 2 Checklist for Identity Manager Standard Edition Installation on Windows 


Task Notes 


1. Prerequisites Review the system requirements for each component to ensure that your 
computer or virtual images meet the installation prerequisites. For more 
information, see Identity Manager System Requirements page. 


2. Plan your installation See Planning to Install Identity Manager in the Net/Q Identity Manager Setup 
Guide for Windows. 
3. Order of installation Ensure that you install the components in the following order because the 


installation programs for some components require information about 
previously installed components. 


1. Sentinel Log Management for Identity Governance and Administration 
(IGA) 


NOTE: This installation is supported only on Linux. For more information, 
see Installing Sentinel Log Management for Identity Governance and 
Administration in the NetIQ Identity Manager Setup Guide for Linux. 


Identity Manager Server components 
Identity Reporting components (also installs single sign-on component) 
Self-Service Password Reset 


Designer 


OY OT. oP Ws 


Analyzer 


4. Install and configure Identity For installation instructions, see Installation Procedures for Identity Manager 
Manager Server Components Server, Identity Applications, and Identity Reporting in the Net/Q Identity 
Manager Setup Guide for Windows. 


For configuration instructions, see the respective Identity Server component- 
specific configuration procedures in the NetIQ Identity Manager Setup Guide 
for Windows. 


5. Install and configure Identity For installation instructions, Installation Procedures for Identity Manager 
Reporting components Server, Identity Applications, and Identity Reporting in the Net/Q Identity 
Manager Setup Guide for Windows: 


For configuration instructions, see Configuring Identity Reporting in the Net/Q 
Identity Manager Setup Guide for Windows. 


NOTE: You must import the report definitions into Identity Reporting. To 
download them, use the Download page within the Reporting application. 


6. Install and configuring the For installation instructions, see Installing SSPR in the Net/Q Identity Manager 
Password Management Setup Guide for Windows. 
Component 


For configuration instructions, see Configuring Self Service Password Reset for 
Identity Manager in the Net/Q Identity Manager Setup Guide for Windows. 


7. Activating Identity Manager Activate your Identity Manager components. For more information, see 
Activating Identity Manager in the NetIQ Identity Manager Setup Guide for 
Windows. 
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Creating and Assigning rptadmin Role to a User 


You create an Organizational Role object in the Identity Vault and then assign this role to a new user or an 
existing user by using iManager. 
1 Create an Organizational Role object. 
1a In NetIQ iManager, click View Objects. 


1b Click the Organizational Unit in which you want to create a new Report Administrator 
(reportAdmin) role. 


1c Click New > Create Object. 
1d From Available object classes, select Organizational Role and click OK. 
1e Type the name and context of the object or use the Object Selector to find it, then click OK. 
1f When the confirmation message appears, click OK. 
2 Assign reportAdmin role to a user object. 
2a In NetIQ iManager, click Roles and Tasks. 
2b Click Directory Administration > Modify Object. 
2c Specify the name and context of the user object or use the Object Selector to locate it, then click OK. 
The Content frame displays the user object’s property book. 
2d On the General tab, click the Other page. 
2e On the screen that appears, select Object Class from Valued Attributes. 
2f Click Edit to add a new attribute to the user object. 
2g Click +, then specify a name, nrfldentity, for the attribute, and click OK. 
2h Click OK to save your changes. 
2i 


Select Object Class from Valued Attributes. 


2j From Unvalued Attributes, select nfrmemberof attribute, then click Right Arrow graphic to add this 
attribute to Valued Attributes. 


2k To specify a value for the attribute, browse to the repor tAdmin role that you created in Step 1 on 
page 6. 


If you are using Firefox, click the + symbol to add information instead of typing directly in the field. 
2 


Click Apply or OK to save the changes. 


Post-Installation Tasks 


To modify installation properties after installation, run the configuration update utility depending on your 
platform. 


¢ Linux: Run configupdate.sh from /opt/netiq/idm/apps/configupdate. 
+ Windows: Run configupdate. bat from C:\netiq\idm\apps\IDMReporting\bin. 


If you change any setting for Identity Reporting through the configuration update utility, you must restart the 
Tomcat application server for the changes to take effect. However, you do not need to restart the application 
server after making changes in the web user interface for Identity Reporting. 
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Upgrading Identity Manager 


NetIQ supports the following upgrade paths for upgrading to Identity Manager 4.8: 


+ Identity Manager 4.7 Standard Edition to Identity Manager 4.8 Standard Edition 


+ Identity Manager 4.7 Standard Edition to Identity Manager 4.8 Advanced Edition 


You cannot perform a direct upgrade from Identity Manager 4.7 Standard Edition to Identity Manager 4.8 
Advanced Edition. However, you can choose one of the following approaches to complete the upgrade: 


+ Upgrade Identity Manager 4.7 Standard Edition to Identity Manager 4.8 Standard Edition and then 


upgrade to Identity Manager 4.8 Advanced Edition. 


+ Upgrade Identity Manager 4.7 Standard Edition to Identity Manager 4.7 Advanced Edition and then 


upgrade to Identity Manager 4.8 Advanced Edition. 


Upgrading Identity Manager 4.7 Standard Edition to Identity Manager 4.8 
Standard Edition 


Before performing an upgrade, NetIQ recommends that you review Upgrading to Standard Edition section in 
the NetIQ Identity Manager 4.8 Release Notes and then complete the following tasks in the same sequence: 


NOTE: The same steps apply if you are upgrading from 4.6.4 Standard Edition to 4.8 Standard Edition. 


Table 3 Checklist for Upgrading form Identity Manager 4.7 Standard Edition to Identity Manager 4.8 Standard Edition 


Task 


1. Review the 
differences 
between an 
upgrade anda 
migration 


2. Plan your 
upgrade 


3. Get the files 
needed for 
upgrade/ 
migrate 


4. Interaction 
among Identity 
Manager 
components 


Linux 


See Understanding Upgrade Process in the 
NetIQ Identity Manager Setup Guide for 
Linux. 


You cannot directly upgrade or migrate to 
the 4.8 version from versions before 4.6. 
For information on the supported upgrade 
paths, see Upgrading from Identity 
Manager 4.6.x versions in the Identity 
Manager 4.8 Release Notes. 


Ensure that you have the latest installation 
kit to upgrade/migrate Identity Manager to 
4.8 Standard Edition. 


See “Considerations for Installing Identity 
Manager Components ” in the Net/Q 
Identity Manager Setup Guide for Linux. 


Windows 


See Understanding Upgrade and Migration in the 
NetIQ Identity Manager Setup Guide for Windows. 


You cannot directly upgrade or migrate to the 4.8 
version from versions before 4.6. For information on 
the supported upgrade paths, see Upgrading from 
Identity Manager 4.6.x versions in the Identity 
Manager 4.8 Release Notes. 


Ensure that you have the latest installation kit to 
upgrade/migrate Identity Manager to 4.8 Standard 
Edition. 


See “Installation and Configuration Process 
Overview” in the NetIQ Identity Manager Setup 
Guide for Windows. 
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Task 


10. 


11. 


12. 


13. 


14. 


15. 


System 
requirements 


Back up the 
current project, 
driver 
configuration, 
and databases 


Upgrade 
Analyzer 


Upgrade 
Designer 


Upgrade 
eDirectory 


Upgrade 
iManager 


Stop the drivers 


Upgrade the 
Identity 


Linux 


Ensure that your computers meet the 
hardware and software prerequisites for a 
newer version of Identity Manager. For 
more information, see the Identity 
Manager System Requirements page. 


See “Backing Up the Current Configuration 
” in the NetIQ Identity Manager Setup 
Guide for Linux. 


See “Upgrading Analyzer” in the Net/Q 
Identity Manager Setup Guide for Linux. 


See “Upgrading Designer” in the NetIQ 
Identity Manager Setup Guide for Linux. 


See Upgrading the Identity Vault in the 
NetIQ Identity Manager Setup Guide for 
Linux. 


Upgrade iManager to the latest version. For 
upgrade instructions, see Upgrading 
iManager in the Net/Q Identity Manager 
Setup Guide for Linux. 


See Stopping the Drivers in the NetIQ 
Identity Manager Setup Guide for Linux. 


See Upgrading Identity Manager Engine in 
the NetIQ Identity Manager Setup Guide 


Manager Server for Linux. 


Components 


(Conditional) 
Upgrade the 
packages 


Apply Identity 
Manager 4.8 
Standard 
Edition 
activation key 


Upgrade 
Identity 
Reporting 
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This is only required if a newer version of a 
package is available and there is a new 
functionality included in the policies for a 
driver that you want to add to your existing 
driver. 


In iManager, make sure that you apply the 
Identity Manager 4.8 Standard Edition 
activation. If you do not apply the 
activation, Identity Manager engine and 
drivers run in the evaluation mode. 


See Upgrading Identity Reporting in the 
NetIQ Identity Manager Setup Guide for 
Linux. 


Windows 


Ensure that your computers meet the hardware and 
software prerequisites for a newer version of 
Identity Manager. For more information, see the 
Identity Manager System Requirements page. 


See Backing Up the Current Configuration in the 
NetIQ Identity Manager Setup Guide for Windows. 


See Upgrading Analyzer in the Net/Q Identity 
Manager Setup Guide for Windows. 


See Upgrading Designer in the Net/Q Identity 
Manager Setup Guide for Windows. 


See Upgrading the Identity Vault in the Net/Q 
Identity Manager Setup Guide for Windows. 


Upgrade iManager to the latest version. For upgrade 
instructions, see Upgrading iManager in the Net/Q 
Identity Manager Setup Guide for Windows. 


Stop the drivers that are associated with the server 
where you installed the Identity Manager engine. 
For more information, see Stopping and Starting 
Identity Manager Drivers in the Net/Q Identity 
Manager Setup Guide for Windows. 


See Upgrading the Identity Manager Engine 
Components in the NetIQ Identity Manager Setup 
Guide for Windows. 


This is only required if a newer version of a package 
is available and there is a new functionality included 
in the policies for a driver that you want to add to 
your existing driver. 


In iManager, make sure that you apply the Identity 
Manager 4.8 Standard Edition activation. If you do 
not apply the activation, Identity Manager engine 

and drivers run in the evaluation mode. 


See Upgrading Identity Reporting in the Net/Q 
Identity Manager Setup Guide for Windows. 


Task 


16. Start the drivers 


Linux 


Start the drivers associated with the 
Identity Reporting and Identity Manager 
engine. For more information, see Starting 
the Drivers in the Net/Q Identity Manager 
Setup Guide for Linux. 


17. (Conditional) If you have custom policies and rules, 
Restore your restore your custom settings. For more 
custom settings information, see Restoring Custom Policies 

and Rules to the Driver in the NetIQ 
Identity Manager Setup Guide for Linux. 

18. (Conditional) If you are using NetIQ Sentinel, ensure that 
Upgrade you are running the latest service pack. For 
Sentinel more information about upgrading 


Sentinel, see the Net/Q Sentinel Installation 
and Configuration Guide. 


Windows 


Start the drivers associated with the Identity 
Reporting and Identity Manager engine. For more 
information, see Starting the Drivers in the Net/Q 
Identity Manager Setup Guide for Windows. 


If you have custom policies and rules, restore your 
custom settings. For more information, see 
Restoring Custom Policies and Rules to the Driver in 
the NetIQ Identity Manager Setup Guide for 
Windows. 


Sentinel installation is not supported on Windows. 


Upgrading Identity Manager 4.7 Standard Edition to Identity Manager 4.8 


Advance 


d Edition 


Upgrading Identity Manager 4.7 Standard Edition to Identity Manager 4.8 Advanced Edition involves 
configuration changes for the Identity Manager components. You do not need to run the Identity Manager 
installation program to perform this upgrade. 


The Identity Manager 4.8 Advanced Edition includes all the features included in the Standard Edition along 
with additional features such as identity applications. The NetIQ Identity Manager 4.8 Release Notes includes 


brief details 


of the new features in Identity Manager 4.8. 


To perform the upgrade, NetIQ recommends that you complete the steps in the below checklist in the given 


order: 


NOTE: The same steps apply if you are upgrading from 4.6.4 Standard Edition to 4.8 Advanced Edition. 


Table 4 Checklist for Upgrading form Identity Manager 4.7 Standard Edition to Identity Manager 4.8 Advanced Edition 


Task 


1. Review the 


differences and a migration. For more information, see 
between an Understanding Upgrade Process in the Net/Q 
upgrade anda Identity Manager Setup Guide for Linux. 
migration 

2. Plan your You cannot directly upgrade or migrate to the 
upgrade 4.8 version from versions before 4.6. For 


Linux 


information on the supported upgrade paths, 
see Upgrading from Identity Manager 4.6.x 
versions in the Identity Manager 4.8 Release 


Notes. 


Review the differences between an upgrade 


Windows 


Review the differences between an upgrade 
and a migration. For more information, see 
Understanding Upgrade and Migration in the 
NetIQ Identity Manager Setup Guide for 
Windows. 


You cannot directly upgrade or migrate to the 
4.8 version from versions before 4.6. For 
information on the supported upgrade paths, 
see Upgrading from Identity Manager 4.6.x 
versions in the Identity Manager 4.8 Release 
Notes. 
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Task 


3. Get the files 
needed for 
upgrade/ 
migrate 


4. Learn about the 
interaction 
among Identity 
Manager 
components 


5. System 
requirements 


6. Stop the 
application 
server where 
Identity 
Reporting is 
installed 


7. Uninstall 
Identity 
Reporting 


8. Apply the 
Identity 
Manager 4.8 
Advanced 
Edition 
activation key 

9. Install and 
configure the 
identity 
applications 
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Linux 


Ensure that you have the latest installation kit 
to upgrade Identity Manager to 4.8 Advanced 
Edition. 


For more information, see “Planning Your 
Installation ” in the NetIQ Identity Manager 
Setup Guide for Linux. 


Ensure that your computers meet the hardware 
and software prerequisites for a newer version 
of Identity Manager. For more information, see 
the Identity Manager System Requirements 
page. 


Stop Tomcat. 


Uninstall the Identity Reporting WAR files from 
your application server. To do this, follow the 
instructions in the documentation specific to 
your application server. For more information, 
see Uninstalling Identity Reporting in the NetIQ 
Identity Manager Setup Guide for Linux. 


In iManager, ensure that you apply the Identity 
Manager 4.8 Advanced Edition activation key. 
Otherwise, Identity Manager engine upgrade 
does not proceed. 


For installation instructions, see Performing an 
Interactive Installation or Performing a Silent 
Installation in the Net/Q Identity Manager 
Setup Guide for Linux. 


For configuration instructions, see Configuring 
the Identity Manager Components in the NetIQ 
Identity Manager Setup Guide for Linux. 


Windows 


Ensure that you have the latest installation kit 
to upgrade Identity Manager to 4.8 Advanced 
Edition. 


For more information, see “Planning Your 
Installation ” in the NetIQ Identity Manager 
Setup Guide for Windows. 


Ensure that your computers meet the hardware 
and software prerequisites for a newer version 
of Identity Manager. For more information, see 
the Identity Manager System Requirements 
page. 


Stop Tomcat. 


Uninstall the Identity Reporting WAR files from 
your application server. To do this, follow the 
instructions in the documentation specific to 
your application server. For more information, 
see Uninstalling Identity Reporting in the Net/Q 
Identity Manager Setup Guide for Windows. 


In iManager, ensure that you apply the Identity 
Manager 4.8 Advanced Edition activation key. 
Otherwise, Identity Manager engine upgrade 
does not proceed. 


For installation instructions, see Installation 
Procedures for Identity Manager Server, 
Identity Applications, and Identity Reporting in 
the NetIQ Identity Manager Setup Guide for 
Windows. 


For configuration instructions, see Configuring 
Identity Applications in the NetIQ Identity 
Manager Setup Guide for Windows. 


Task Linux Windows 
10. Install and For installation instructions, see Performing an For installation instructions, see Installation 
configure Interactive Installation or Performing a Silent Procedures for Identity Manager Server, 
Identity Installation in the Net/Q Identity Manager Identity Applications, and Identity Reporting in 
Reporting Setup Guide for Linux. the NetIQ Identity Manager Setup Guide for 
Windows. 
For configuration instructions, see Configuring 
the Identity Manager Components inthe NetIQ For configuration instructions, see Configuring 
Identity Manager Setup Guide for Linux. Identity Reporting in the NetIQ Identity 
Manager Setup Guide for Windows. 
11. (Conditional) If you have custom policies and rules, restore If you have custom policies and rules, restore 


your custom settings. For more information, 
see Restoring Custom Policies and Rules to the 
Driver in the Net/Q Identity Manager Setup 
Guide for Windows. 


your custom settings. For more information, 
see Restoring Custom Policies and Rules to the 
Driver in the Net/Q Identity Manager Setup 
Guide for Linux. 


Restore your 
custom settings 


12. (Conditional) (Conditional) If you are using NetIQ Sentinel, Sentinel installation is only supported on Linux. 
Upgrade ensure that you are running the latest service 7 ; : 
Sentinel pack. For more information about upgrading (Conditional) If you are using NetIQ Sentinel, 


ensure that you are running the latest service 
pack. For more information about upgrading 
Sentinel, see the Net/Q Sentinel Installation and 
Configuration Guide. 


Sentinel, see the Net/Q Sentinel Installation and 
Configuration Guide. 


Updating the Configuration Information of the Data Collection Service Driver 


1 Launch Designer, then go to DCS Driver Configuration > Driver Parameters > Driver Options. 
2 In the Managed System Gateway Registration section, change the settings as below: 
+ Set Register Manage System Gateway to Yes. 


+ Change the MSGW Driver DN. For example, CN=Managed System Gateway 
Driver, cn=driverseti, o=system. 


¢ Change the User DN. For example, cn=admin, ou=sa, o=system. 
¢ Specify the password for the User DN. 


For more information on configuring the driver, see Configuring the Data Collection Services Driver to 
Collect Data from the Identity Applications in the Net/Q Identity Manager Setup Guide for Windows. 


3 Save the settings, then deploy the DCS driver. 
4 Restart the DCS driver. 


Upgrading the Identity Reporting might not immediately show the Advanced Version. The version change 
occurs after the next batch of events is processed. 


Uninstalling Identity Manager 4.8 Standard Edition 


Some components of Identity Manager have prerequisites for uninstallation. Ensure that you review all the 
information for each component before beginning the uninstallation process. For more information, see 
Uninstalling Identity Manager Components in the Net/Q Identity Manager Setup Guide for Linux or Uninstalling 
Identity Manager Components in the Net/Q Identity Manager Setup Guide for Windows. 
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